Vendor

    Fluent

    8 known vulnerabilities in products by Fluent, 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Fluent
    CriticalCVE-2026-44024

    Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

    also in 3 other products

    		9.8
    CriticalCVE-2026-61674

    Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

    also in 2 other products

    		—
    CriticalCVE-2022-39379

    Fluentd: Deserialization of Untrusted Data

    also in 2 other products

    		3.1
    HighCVE-2021-41186

    ReDoS vulnerability in parser_apache2

    also in 1 other product

    		5.9
    HighCVE-2026-44160

    Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

    also in 2 other products

    		7.5
    HighCVE-2026-44025

    Fluentd: Exposure of Sensitive Information via Monitor Agent API

    also in 2 other products

    		7.5
    HighCVE-2026-44161

    Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

    also in 3 other products

    		7.2
    LowCVE-2026-44162

    fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`

    		2.7

    News

    Products

    Products by Fluent
    Fluentd60